$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa File: e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa (raw, json) Hash identifier: s6i/KCLmsSHNSpD7CZU0zfsrcyTBW+GCJfy/M7CYDUI= Subject key identifier: 7D:D9:F4:6C:A1:69:8F:C7:D3:27:4D:7A:62:00:F7:29:EB:39:8F:D2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AEE2A85472ED48CB5987D0F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa Signing time: Thu 21 Aug 2025 13:08:49 +0000 ROA not before: Thu 21 Aug 2025 13:08:49 +0000 ROA not after: Wed 19 Nov 2025 14:08:49 +0000 asID: 31898 IP address blocks: 204.216.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:2a:85:47:2e:d4:8c:b5:98:7d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 21 13:08:49 2025 GMT Not After : Nov 19 14:08:49 2025 GMT Subject: CN=80512378-9e44-4569-8498-de188348a9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:5c:cb:c7:64:74:50:c9:ae:33:3b:9a:4f: b4:f6:bd:19:bd:8f:2d:34:05:dc:1c:57:10:04:86: 96:8e:1c:b5:d7:2a:74:26:1a:1d:03:7b:b9:dc:86: 6a:fd:84:4a:5f:3b:36:ea:ab:b8:3b:85:f2:d4:80: d4:c4:d4:19:6b:b5:e9:21:e6:87:eb:b9:d7:b4:ca: 60:ca:94:fe:dd:9e:63:25:8b:89:60:7c:6d:a7:5e: 1a:89:3e:69:93:c7:12:62:4e:f7:c1:5c:c4:d9:fe: af:36:15:90:d1:96:18:0c:71:22:b6:62:87:dc:9c: b4:37:17:2f:c5:68:9d:52:32:70:33:10:40:37:cb: bd:98:c2:1c:ac:40:8a:3a:13:8b:aa:f8:3d:fd:79: 93:fa:aa:bb:76:36:a5:e5:4a:68:b1:7c:ef:2a:9f: cd:37:f6:53:a4:73:4e:3e:ce:a1:71:df:3d:c8:2b: 22:ee:60:e3:f4:d0:37:f7:6b:4f:41:2d:c3:8d:d0: 16:d5:35:ed:61:44:b0:e4:97:63:f2:d1:23:38:a9: 10:0d:39:96:f1:7a:e2:1a:01:cd:23:2f:0a:84:92: 1e:96:ce:27:26:96:41:7f:c9:7a:db:bb:a7:af:0d: 2b:2a:a4:af:6e:60:98:66:cb:09:ec:a6:70:e0:29: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D9:F4:6C:A1:69:8F:C7:D3:27:4D:7A:62:00:F7:29:EB:39:8F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e6970d7f-65c7-3f5f-86c4-9dca3a270f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 204.216.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:c7:4a:22:67:4f:f4:47:28:dc:af:cf:ab:88:c7:a4:cd: 0c:16:05:2b:20:9f:34:a7:84:38:ec:5d:a2:c2:9c:c7:72:07: a8:78:b9:cf:6d:e2:1b:c0:cf:80:b3:82:f4:98:98:7d:81:ae: c3:60:dc:56:2e:ab:f9:72:1e:1f:12:62:c6:a1:5f:2b:3e:0d: 9b:62:8d:96:7c:8e:be:0c:43:1b:ef:44:0a:3f:85:d3:40:13: a2:b7:e5:2d:a9:03:2e:9d:5a:52:3c:96:54:2d:70:cc:8c:fd: ba:5a:ff:7f:3e:05:8e:7f:e9:61:5c:07:27:37:fe:06:a2:f4: 24:20:7e:88:07:ac:22:26:87:8d:e5:c8:23:4f:22:10:55:ed: 37:6a:ba:6c:15:ee:71:c9:37:05:62:79:a3:40:48:1c:d7:25: d0:5f:20:b4:6f:b9:24:93:3b:c3:ff:e7:97:6c:49:bc:9a:84: 62:31:02:b2:55:e6:1a:fc:a2:13:14:ca:59:eb:46:2f:91:48: 1a:4e:e9:ee:62:20:d1:f6:1a:00:24:62:f6:0a:ce:a0:7b:e0: 96:34:eb:6e:e9:36:20:90:c7:11:f4:25:77:93:68:0a:d5:18: 58:68:b1:4f:b5:28:ec:db:78:db:96:3e:71:8b:6c:39:b3:bf: b7:ca:0c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruKoVHLtSMtZh9DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMTEzMDg0OVoXDTI1MTExOTE0MDg0OVowLzEtMCsGA1UEAxMk ODA1MTIzNzgtOWU0NC00NTY5LTg0OTgtZGUxODgzNDhhOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjERcy8dkdFDJrjM7mk+09r0ZvY8tNAXcHFcQ BIaWjhy11yp0JhodA3u53IZq/YRKXzs26qu4O4Xy1IDUxNQZa7XpIeaH67nXtMpg ypT+3Z5jJYuJYHxtp14aiT5pk8cSYk73wVzE2f6vNhWQ0ZYYDHEitmKH3Jy0Nxcv xWidUjJwMxBAN8u9mMIcrECKOhOLqvg9/XmT+qq7djal5UposXzvKp/NN/ZTpHNO Ps6hcd89yCsi7mDj9NA392tPQS3DjdAW1TXtYUSw5Jdj8tEjOKkQDTmW8XriGgHN Iy8KhJIels4nJpZBf8l627unrw0rKqSvbmCYZssJ7KZw4ClAFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3Z9GyhaY/H0ydNemIA9ynrOY/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTY5NzBkN2YtNjVjNy0z ZjVmLTg2YzQtOWRjYTNhMjcwZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzNh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ4x0oiZ0/0Ryjcr8+riMekzQwWBSsgnzSnhDjsXaLCnMdyB6h4uc9t 4hvAz4CzgvSYmH2BrsNg3FYuq/lyHh8SYsahXys+DZtijZZ8jr4MQxvvRAo/hdNA E6K35S2pAy6dWlI8llQtcMyM/bpa/38+BY5/6WFcByc3/gai9CQgfogHrCImh43l yCNPIhBV7TdqumwV7nHJNwVieaNASBzXJdBfILRvuSSTO8P/55dsSbyahGIxArJV 5hr8ohMUylnrRi+RSBpO6e5iINH2GgAkYvYKzqB74JY0627pNiCQxxH0JXeTaArV GFhosU+1KOzbeNuWPnGLbDmzv7fKDGo= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:31 2025 by rpki-client